snowflake-connector-python is vulnerable to Regular Expression Denial of Service (ReDoS)

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-42965 · ADVISORY
• snowflakedb/snowflake-connector-python#1327 · WEB
• snowflakedb/snowflake-connector-python commit b9d2fc7 · WEB
• snowflakedb/snowflake-connector-python · PACKAGE
• snowflakedb/snowflake-connector-python release v2.8.2 · WEB
• research.jfrog.com/vulnerabilities/snowflake-connector-python-redos-xray-257185 · WEB
• research.jfrog.com/vulnerabilities/snowflake-connector-python-redos-xray-257185 · Exploit
• pypi.org/project/snowflake-connector-python · PACKAGE
• GitHub Advisory GHSA-4r6j-fwcx-94cf · ADVISORY

snowflake-connector-python のその他の脆弱性

• CVE-2026-86597中 6.5Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers allowed authenticati…
• CVE-2026-15925緊急 9.2Improper TLS hostname verification in Snowflake Connector for Python versions prior to 4.7.1 and 3.18.1 may have allowed a network-positione…
• CVE-2025-24795中 5.5The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all st…
• CVE-2025-24794高 7.8The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all st…
• CVE-2025-24793高 7.0The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all st…